U.S. Serial No.: 10/762,972 



SPECIFICATION 

Please enter the following amendments to the specification: 

[0026] FIG. 4 is a flow diagram depicting an exemplary embodiment of a two-tier 
content/satellite-link protection process 400 for use with the master headend 102 shown 
in FIG. 3. The process 400 begins at step 402. At step 404, EMM data for the content 
services is generated. The content EMM data may comprises comprise one or more EMM 
streams used to authorize subscriber STBs for viewing particular content services. At step 
410, one or more services are created for carrying the content EMM data ("content EMM 
services"). Each of the content EMM services may comprise one or more EMM streams 
and a program map table (PMT). The PMT includes packet identifier (PID) information 
for identifying the component EMM streams. The content EMM services may be 
"dummy services", which are not identified in the channel map and are thus invisible to 
the subscriber STBs. 

[0029] The TMX 308 receives content EMM data 512 from the content CA system 310. 
The content EMM data 512 is used to authorize the subscriber STBs. The TMX 308 
generates EMM service data 516 for carrying the content EMM data 512 in response to 
PMT data 514 from the satellite CA system 310. The TMX 308 provides content EMM 
service data [[516]] 518 to the satellite encryption unit 306. The satellite encryption unit 
306 encrypts the content EMM service data 516 in response to satellite encryption control 
data 515 provided by the satellite CA system 310. The satellite encryption unit 306 
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provides encrypted content EMM service data 518 to the TMX 304. The combined CAT 
506 includes a descriptor to identify the satellite EMM data 504 and one or more 
descriptors to identify one or more content EMM services, respectively, in the EMM 
service data 516. 
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